Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

2026-03-19T08:52:08Zb24e8d4e65a7b57c4364f1180a3ebc27d0b99deb9e1b4ef11b6552bee5c30aef
DarkSworddrive-by-exploitexploitation-frameworkiOS 18in-the-wildiosiphonelarge-scale-compromisemobilemobile-exploitremote-code-executionspywarethreat-actor:russian

What happened

A new, highly capable iPhone exploitation framework dubbed “DarkSword” has been observed in the wild and attributed to Russian actors. DarkSword can remotely compromise iPhones running iOS 18 via drive-by web exploits (users only need to visit infected websites), enabling full device takeover at scale. Reporting suggests the toolkit is sophisticated—likely government-grade—and may have infected tens to hundreds of millions of devices or at least presents mass-impact potential. No CVEs were cited in the source, but the issue represents a critical remote code execution and persistent access risk

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
wired_security
Record identifier
b24e8d4e65a7b57c4364f1180a3ebc27d0b99deb9e1b4ef11b6552bee5c30aef
Enrichment time
2026-03-19T08:52:08Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.